4 ms·

Not really no. > To protect the data that is not covered by end-to-end encryption, Telegram uses a distributed infrastructure. Cloud chat data is stored in mul

Not really no. > To protect the data that is not covered by end-to-end encryption, Telegram uses a distributed infrastructure. Cloud chat data is stored in multiple data centers around the globe that are controlled by different legal entities spread across different jurisdictions. The relevant decryption keys are split into parts and are never kept in the same place as the data they protect. As a result, several court orders from different jurisdictions are required to force us to give up any data. > Thanks to this structure, we can ensure that no single government or block of like-minded countries can intrude on people's privacy and freedom of expression. Telegram can be forced to give up data only if an issue is grave and universal enough to pass the scrutiny of several different legal systems around the world. https://telegram.org/faq#q-do-you-process-data-requests https://telegram.org/faq#q-do-you-process-data-requests

raverbashing 2y ago
That's funny, because some time ago (well, some years ago) I swore people were crapping on telegram's encryption and telling it was almost fake But if it was so weak then various intelligence agencies wouldn't be bothering with it
- croes 2y ago
  You wouldn't anybody to know if it was easy to break. So we actually don't know if it's weak or not.
croes 2y ago
Actually yes. There is a difference between can't and won't. They just make it hard to force them but they could if they want to. Proper encrypted message can't be decrypted no matter how much they want to.
mrtksn 2y ago
That's a system put in place against the legal system but it's not a technical limitation. For example, he will be able to look into the chats of his ex without the need of court orders of multiple unfriendly countries proving that the situation is grave and universal one. When the limitation is not technical, your only guarantee is the integrity of the operators and the lack of interest of your attackers coercing the operators into spying on you. In Telegram's case one could easily assume that the Russians and now the French said him "Nice fortune you built, you are very successful person with a long life to live ahead. It would be a shame if you lose your fortune or spent your days locked in a room instead of flying on a private jet to Ibiza"
- riedel 2y ago
  Funny thing is that now Russia says they France needs to guarantee access to the Russian embassy for him (not really sure if he wants that). But wikipedia says he has UAE and French citizenship...
  - LtWorf 2y ago
    And russian...
  - victorbjorklund 2y ago
    he 100% cooperates with FSB. That is why they happned to arrest the french ambassadors relative on drug charges today to be able to trade him.
matteocontrini 2y ago
Where does it say they don't have the keys? It literally says they store the keys in their own datacenters. Which is obvious anyway, otherwise the API wouldn't be able to return the unencrypted data.

raverbashing 2y ago

That's funny, because some time ago (well, some years ago) I swore people were crapping on telegram's encryption and telling it was almost fake But if it was so weak then various intelligence agencies wouldn't be bothering with it

croes 2y ago
You wouldn't anybody to know if it was easy to break. So we actually don't know if it's weak or not.

croes 2y ago

Actually yes. There is a difference between can't and won't. They just make it hard to force them but they could if they want to. Proper encrypted message can't be decrypted no matter how much they want to.

mrtksn 2y ago

That's a system put in place against the legal system but it's not a technical limitation. For example, he will be able to look into the chats of his ex without the need of court orders of multiple unfriendly countries proving that the situation is grave and universal one. When the limitation is not technical, your only guarantee is the integrity of the operators and the lack of interest of your attackers coercing the operators into spying on you. In Telegram's case one could easily assume that the Russians and now the French said him "Nice fortune you built, you are very successful person with a long life to live ahead. It would be a shame if you lose your fortune or spent your days locked in a room instead of flying on a private jet to Ibiza"

riedel 2y ago
Funny thing is that now Russia says they France needs to guarantee access to the Russian embassy for him (not really sure if he wants that). But wikipedia says he has UAE and French citizenship...
- LtWorf 2y ago
  And russian...
- victorbjorklund 2y ago
  he 100% cooperates with FSB. That is why they happned to arrest the french ambassadors relative on drug charges today to be able to trade him.

matteocontrini 2y ago

Where does it say they don't have the keys? It literally says they store the keys in their own datacenters. Which is obvious anyway, otherwise the API wouldn't be able to return the unencrypted data.